@barekey/sdk 0.4.4 → 0.6.0

package/README.md

@@ -1,27 +1,104 @@
 # @barekey/sdk
 
-Barekey TypeScript SDK.
+TypeScript SDK for Barekey.
 
 ## Install
 
 ```bash
-bun add @barekey/sdk
+npm install @barekey/sdk
 ```
 
-## Build
+## Entrypoints
+
+- `@barekey/sdk/server`: server reads, CLI-session auth, standalone `.env` mode, and typegen
+- `@barekey/sdk/public`: public-variable reads
+- `@barekey/sdk`: root export
+
+## Server quickstart
+
+Create `barekey.json`:
+
+```json
+{
+  "organization": "acme",
+  "project": "web",
+  "environment": "development"
+}
+```
+
+Log in locally:
 
 ```bash
-bun run build
+barekey auth login
+```
+
+Use the SDK:
+
+```ts
+import { BarekeyClient } from "@barekey/sdk/server";
+
+const barekey = new BarekeyClient();
+
+const databaseUrl = await barekey.get("DATABASE_URL");
+const details = await barekey.get("DATABASE_URL").inspect();
+```
+
+## Auth resolution
+
+In centralized mode the server client uses:
+
+1. `BAREKEY_ACCESS_TOKEN`
+2. a stored CLI session from `barekey auth login`
+
+Optional:
+
+- `BAREKEY_API_URL` overrides the API base URL
+
+## `barekey.json`
+
+Supported keys:
+
+- `organization` or `org`
+- `project`
+- `environment` or `stage`
+- `config.mode`: `"centralized"` or `"standalone"`
+- `config.typegen`: `"semantic"` or `"minimal"`
+
+## Typegen
+
+Generate SDK types into the installed package:
+
+```bash
+barekey typegen
 ```
 
-## Typecheck
+Watch mode:
 
 ```bash
-bun run typecheck
+barekey typegen --watch
 ```
 
-## Test
+`semantic` typegen keeps Barekey metadata in the generated `Env<...>` wrapper, including `Kind`, `Visibility`, and `Rollout`. `minimal` only emits the resolved value type.
+
+## Public client
+
+```ts
+import { PublicBarekeyClient } from "@barekey/sdk/public";
+
+const publicBarekey = new PublicBarekeyClient({
+  organization: "acme",
+  project: "web",
+  environment: "production",
+});
+
+const title = await publicBarekey.get("PUBLIC_TITLE");
+```
+
+## Development
 
 ```bash
+bun install
+bun run build
+bun run typecheck
 bun test
 ```

package/dist/client.d.ts

@@ -9,6 +9,10 @@ export declare class BarekeyClient {
     private requirementsPromise;
     private typegenWatcherStarted;
     constructor();
+    constructor(options: {
+        requirements?: BarekeyClientOptions["requirements"];
+        typegen?: BarekeyClientOptions["typegen"];
+    });
     constructor(options: {
         organization: string;
         project: string;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmBtE,OAAO,KAAK,EACV,oBAAoB,EAEpB,2BAA2B,EAC3B,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAqFpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgD;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,qBAAqB,CAAS;;gBAG1B,OAAO,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;gBACW,OAAO,EAAE;QACnB,IAAI,EAAE,iBAAiB,CAAC;QACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;IAaD,GAAG,CAAC,IAAI,SAAS,UAAU,EACzB,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,UAAU,EAAE,EAC3C,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE,iBAAiB,GAC1B,qBAAqB,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAgBxD,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC;YAkBhC,iBAAiB;YAajB,oBAAoB;IAclC,OAAO,CAAC,oBAAoB;YAWd,mBAAmB;IA6EjC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,uBAAuB;YAejB,gBAAgB;YA0BhB,2BAA2B;YA4B3B,oBAAoB;YAkCpB,mBAAmB;YASnB,kBAAkB;YAQlB,mBAAmB;YAUnB,kBAAkB;YAwDlB,mBAAmB;YAkCnB,oBAAoB;YAuCpB,qBAAqB;YAarB,sBAAsB;CAsBrC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAuBtE,OAAO,KAAK,EACV,oBAAoB,EAEpB,2BAA2B,EAC3B,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAyGpB,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgD;IAChF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,mBAAmB,CAA8B;IACzD,OAAO,CAAC,qBAAqB,CAAS;;gBAG1B,OAAO,EAAE;QACnB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;gBACW,OAAO,EAAE;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;gBACW,OAAO,EAAE;QACnB,IAAI,EAAE,iBAAiB,CAAC;QACxB,YAAY,CAAC,EAAE,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;KAC3C;IAaD,GAAG,CAAC,IAAI,SAAS,UAAU,EACzB,IAAI,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,gBAAgB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,UAAU,EAAE,EAC3C,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE,iBAAiB,GAC1B,qBAAqB,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAgBxD,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC;YAsBhC,iBAAiB;YAajB,oBAAoB;IAuBlC,OAAO,CAAC,oBAAoB;YAWd,mBAAmB;IA6EjC,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,uBAAuB;YAiBjB,gBAAgB;YAuChB,2BAA2B;YA4B3B,oBAAoB;YAkCpB,mBAAmB;YASnB,kBAAkB;YAQlB,mBAAmB;YAUnB,kBAAkB;YAgElB,mBAAmB;YAkCnB,oBAAoB;YAuCpB,qBAAqB;YAarB,sBAAsB;CAsBrC"}

package/dist/client.js

@@ -5,6 +5,7 @@ import { getJson, postJson } from "./internal/http.js";
 import { validateRequirements } from "./internal/requirements.js";
 import { resolveRuntimeContext } from "./internal/runtime.js";
 import { createBarekeyClientSingletonKey } from "./internal/singleton.js";
+import { buildStandaloneTypegenManifest, loadStandaloneDefinitions, } from "./internal/standalone.js";
 import { MemoryCache } from "./internal/cache.js";
 import { DEFAULT_TYPEGEN_TTL_MS, resolveTtlMilliseconds } from "./internal/ttl.js";
 import { hasFreshInstalledSdkTypegen, resolveInstalledSdkGeneratedTypesPath, writeInstalledSdkGeneratedTypes, } from "./internal/typegen.js";
@@ -55,6 +56,17 @@ function resolveEvaluatedResponse(evaluated) {
         selectedArm: inferSelectedArmFromDecision(evaluated.decision),
     };
 }
+function createTypegenIdentity(context) {
+    return {
+        baseUrl: context.baseUrl,
+        orgSlug: context.organization,
+        projectSlug: context.project,
+        stageSlug: context.environment,
+        typegenMode: context.typegenMode,
+        runtimeMode: context.mode,
+        localEnvRoot: context.localEnvRoot,
+    };
+}
 export class BarekeyClient {
     options;
     fetchFn;
@@ -87,13 +99,15 @@ export class BarekeyClient {
                 message: "Barekey could not update generated SDK types because filesystem access is unavailable.",
             });
         }
-        const manifest = await this.fetchTypegenManifest(context);
-        return await writeInstalledSdkGeneratedTypes(manifest, {
-            baseUrl: context.baseUrl,
-            orgSlug: context.organization,
-            projectSlug: context.project,
-            stageSlug: context.environment,
-        });
+        const manifest = context.mode === "standalone"
+            ? await buildStandaloneTypegenManifest({
+                rootDirectory: context.localEnvRoot,
+                organization: context.organization,
+                project: context.project,
+                environment: context.environment,
+            })
+            : await this.fetchTypegenManifest(context);
+        return await writeInstalledSdkGeneratedTypes(manifest, createTypegenIdentity(context));
     }
     async getRuntimeContext() {
         if (this.runtimeContextPromise === null) {
@@ -109,6 +123,14 @@ export class BarekeyClient {
     }
     async fetchTypegenManifest(context) {
         const resolvedContext = context ?? (await this.getRuntimeContext());
+        if (resolvedContext.mode !== "centralized") {
+            return await buildStandaloneTypegenManifest({
+                rootDirectory: resolvedContext.localEnvRoot,
+                organization: resolvedContext.organization,
+                project: resolvedContext.project,
+                environment: resolvedContext.environment,
+            });
+        }
         return await getJson({
             fetchFn: this.fetchFn,
             baseUrl: resolvedContext.baseUrl,
@@ -138,10 +160,13 @@ export class BarekeyClient {
         }
         const intervalMs = this.getTypegenIntervalMs();
         const watcherKey = [
-            context.baseUrl,
+            context.baseUrl ?? "",
             context.organization,
             context.project,
             context.environment,
+            context.mode,
+            context.localEnvRoot ?? "",
+            context.typegenMode,
             generatedTypesPath,
         ].join("|");
         const runWatcher = async (watcher) => {
@@ -187,10 +212,7 @@ export class BarekeyClient {
         };
         sharedTypegenWatchers.set(watcherKey, watcher);
         if (!(await hasFreshInstalledSdkTypegen(intervalMs, {
-            baseUrl: context.baseUrl,
-            orgSlug: context.organization,
-            projectSlug: context.project,
-            stageSlug: context.environment,
+            ...createTypegenIdentity(context),
         }))) {
             void runWatcher(watcher);
         }
@@ -205,16 +227,25 @@ export class BarekeyClient {
         });
     }
     buildDefinitionCacheKey(context, name) {
-        return [context.organization, context.project, context.environment, name].join("|");
+        return [
+            context.mode,
+            context.localEnvRoot ?? "",
+            context.organization,
+            context.project,
+            context.environment,
+            name,
+        ].join("|");
     }
     buildEvaluationCacheKey(context, name, options) {
         return [
+            context.mode,
+            context.localEnvRoot ?? "",
             context.organization,
             context.project,
             context.environment,
             name,
-            options?.seed ?? "",
-            options?.key ?? "",
+            context.mode === "standalone" ? "" : options?.seed ?? "",
+            context.mode === "standalone" ? "" : options?.key ?? "",
         ].join("|");
     }
     async fetchDefinitions(names) {
@@ -222,6 +253,16 @@ export class BarekeyClient {
             return [];
         }
         const context = await this.getRuntimeContext();
+        if (context.mode === "standalone") {
+            const definitions = await loadStandaloneDefinitions(context.localEnvRoot);
+            for (const definition of definitions) {
+                this.definitionCache.set(this.buildDefinitionCacheKey(context, definition.name), definition);
+            }
+            if (names === undefined) {
+                return definitions;
+            }
+            return mapValuesToRequestedOrder(names, definitions);
+        }
         const response = await postJson({
             fetchFn: this.fetchFn,
             baseUrl: context.baseUrl,
@@ -308,6 +349,11 @@ export class BarekeyClient {
         return await Promise.all(definitions.map(async (definition) => await evaluateDefinition(definition, options)));
     }
     async fetchDynamicValues(names, context, options) {
+        if (context.mode === "standalone") {
+            const definitions = await loadStandaloneDefinitions(context.localEnvRoot);
+            const resolvedDefinitions = mapValuesToRequestedOrder(names, definitions);
+            return await Promise.all(resolvedDefinitions.map(async (definition) => await evaluateDefinition(definition)));
+        }
         try {
             if (names.length === 1) {
                 const evaluated = await postJson({

package/dist/handle.d.ts

@@ -1,7 +1,7 @@
 import type { BarekeyCoerceTarget, BarekeyEvaluatedValue, BarekeyResolvedRecord, BarekeyResolvedRecords } from "./types.js";
 type BarekeyCoercibleEnvMarker = {
     readonly __barekey?: {
-        readonly mode: "ab";
+        readonly kind: "ab_roll" | "rollout";
     };
 };
 export declare class BarekeyEnvHandle<TValue = unknown> implements PromiseLike<TValue> {

package/dist/handle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../src/handle.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;KACrB,CAAC;CACH,CAAC;AAaF,qBAAa,gBAAgB,CAAC,MAAM,GAAG,OAAO,CAAE,YAAW,WAAW,CAAC,MAAM,CAAC;IAC5E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuD;IACjF,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,qBAAqB,CAAuD;gBAGlF,qBAAqB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAC3D,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC,MAAM,CAAC;YAQpD,YAAY;YAIZ,iBAAiB;IAOzB,OAAO,IAAI,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAYvD,MAAM,CAAC,QAAQ,GAAG,OAAO,EACvB,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,KAAK,EACrF,MAAM,EAAE,mBAAmB,GAC1B,gBAAgB,CAAC,QAAQ,CAAC;IAS7B,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,GAAG,KAAK,EACtC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC1E,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAI/B,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACxE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;IAI5B,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAG1D;AAED,qBAAa,qBAAqB,CAChC,OAAO,SAAS,aAAa,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CACvD,YAAW,WAAW,CAAC,OAAO,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAsD;IAC7F,OAAO,CAAC,sBAAsB,CAA8D;IAC5F,OAAO,CAAC,sBAAsB,CAAyD;gBAE3E,sBAAsB,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAIzE,kBAAkB;IAO1B,OAAO,IAAI,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAiB3C,aAAa;IAK3B,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,GAAG,KAAK,EACvC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC3E,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAI/B,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACxE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IAI7B,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAG3D"}
+{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../src/handle.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;KACtC,CAAC;CACH,CAAC;AAaF,qBAAa,gBAAgB,CAAC,MAAM,GAAG,OAAO,CAAE,YAAW,WAAW,CAAC,MAAM,CAAC;IAC5E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuD;IACjF,OAAO,CAAC,qBAAqB,CAA+C;IAC5E,OAAO,CAAC,qBAAqB,CAAuD;gBAGlF,qBAAqB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAC3D,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC,MAAM,CAAC;YAQpD,YAAY;YAIZ,iBAAiB;IAOzB,OAAO,IAAI,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAYvD,MAAM,CAAC,QAAQ,GAAG,OAAO,EACvB,IAAI,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,KAAK,EACrF,MAAM,EAAE,mBAAmB,GAC1B,gBAAgB,CAAC,QAAQ,CAAC;IAS7B,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,QAAQ,GAAG,KAAK,EACtC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC1E,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAI/B,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACxE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;IAI5B,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAG1D;AAED,qBAAa,qBAAqB,CAChC,OAAO,SAAS,aAAa,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CACvD,YAAW,WAAW,CAAC,OAAO,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAsD;IAC7F,OAAO,CAAC,sBAAsB,CAA8D;IAC5F,OAAO,CAAC,sBAAsB,CAAyD;gBAE3E,sBAAsB,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAIzE,kBAAkB;IAO1B,OAAO,IAAI,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAiB3C,aAAa;IAK3B,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,GAAG,KAAK,EACvC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC3E,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAI/B,KAAK,CAAC,OAAO,GAAG,KAAK,EACnB,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACxE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IAI7B,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAG3D"}

package/dist/index.d.ts

@@ -2,6 +2,6 @@ export { BarekeyClient } from "./client.js";
 export { PublicBarekeyClient } from "./public-client.js";
 export { BarekeyEnvBatchHandle, BarekeyEnvHandle } from "./handle.js";
 export { BarekeyError, BillingUnavailableError, CoerceFailedError, DeviceCodeExpiredError, DeviceCodeNotFoundError, EvaluationFailedError, FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidDynamicOptionsError, InvalidJsonError, InvalidOrgScopeError, InvalidRefreshTokenError, InvalidRequestError, NetworkError, NoConfigurationProvidedError, NoCredentialsProvidedError, OrgScopeInvalidError, RequirementsValidationFailedError, SdkModuleNotFoundError, TemporalNotAvailableError, TypegenReadFailedError, TypegenUnsupportedSdkError, TypegenWriteFailedError, UnauthorizedError, UnknownError, UsageLimitExceededError, UserCodeInvalidError, VariableNotFoundError, createBarekeyErrorFromCode, docsUrlForErrorCode, formatBarekeyErrorMessage, isBarekeyErrorCode, normalizeErrorCode, } from "./errors.js";
-export type { AB, BarekeyClientOptions, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyErrorCode, BarekeyEnvDescriptor, BarekeyEvaluatedValue, BarekeyGeneratedTypeMap, BarekeyGeneratedValueForKey, BarekeyGeneratedValuesForKeys, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKey, BarekeyLiteralString, BarekeyKnownKey, BarekeyResolvedRecord, BarekeyResolvedRecords, BarekeyResolvedKind, BarekeyRolloutMilestone, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTtlInput, BarekeyTypegenResult, BarekeyValueForGeneratedMap, BarekeyValuesForGeneratedMap, Env, Linear, Secret, BarekeyVisibility, } from "./types.js";
+export type { AB, BarekeyClientOptions, BarekeyCoerceTarget, BarekeyDeclaredType, BarekeyErrorCode, BarekeyEnvDescriptor, BarekeyEvaluatedValue, BarekeyGeneratedTypeMap, BarekeyGeneratedValueForKey, BarekeyGeneratedValuesForKeys, BarekeyGetOptions, BarekeyJsonConfig, BarekeyKey, BarekeyLiteralString, BarekeyMode, BarekeyKnownKey, BarekeyResolvedRecord, BarekeyResolvedRecords, BarekeyResolvedKind, BarekeyRolloutMilestone, BarekeyStandardSchemaV1, BarekeyTemporalInstant, BarekeyTemporalInstantLike, BarekeyTypegenMode, BarekeyTtlInput, BarekeyTypegenResult, BarekeyValueForGeneratedMap, BarekeyValuesForGeneratedMap, Env, Linear, Secret, BarekeyVisibility, } from "./types.js";
 export type { BarekeyPublicGeneratedTypeMap, BarekeyPublicKey, BarekeyPublicKnownKey, BarekeyPublicValueForKey, BarekeyPublicValuesForKeys, PublicBarekeyClientOptions, } from "./public-types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,EAAE,EACF,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAC5B,GAAG,EACH,MAAM,EACN,MAAM,EACN,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,EAAE,EACF,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAC5B,GAAG,EACH,MAAM,EACN,MAAM,EACN,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC"}

package/dist/internal/config.d.ts

@@ -0,0 +1,5 @@
+import type { BarekeyMode, BarekeyTypegenMode } from "../types.js";
+export declare function readConfigString(value: unknown): string | undefined;
+export declare function normalizeTypegenMode(value: unknown, source: string): BarekeyTypegenMode;
+export declare function normalizeMode(value: unknown, source: string): BarekeyMode;
+//# sourceMappingURL=config.d.ts.map

package/dist/internal/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/internal/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEnE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAYvF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAYzE"}

package/dist/internal/config.js

@@ -0,0 +1,26 @@
+import { InvalidConfigurationProvidedError } from "../errors.js";
+export function readConfigString(value) {
+    return typeof value === "string" ? value.trim() : undefined;
+}
+export function normalizeTypegenMode(value, source) {
+    if (value === undefined) {
+        return "semantic";
+    }
+    if (value === "semantic" || value === "minimal") {
+        return value;
+    }
+    throw new InvalidConfigurationProvidedError({
+        message: `${source} must provide config.typegen as "semantic" or "minimal" when set.`,
+    });
+}
+export function normalizeMode(value, source) {
+    if (value === undefined) {
+        return "centralized";
+    }
+    if (value === "centralized" || value === "standalone") {
+        return value;
+    }
+    throw new InvalidConfigurationProvidedError({
+        message: `${source} must provide config.mode as "centralized" or "standalone" when set.`,
+    });
+}

package/dist/internal/node-runtime.d.ts

@@ -1,6 +1,17 @@
+export type NodeRuntimeModules = {
+    childProcess: typeof import("node:child_process");
+    fs: typeof import("node:fs/promises");
+    moduleApi: {
+        createRequire(path: string | URL): NodeRequire;
+    };
+    os: typeof import("node:os");
+    path: typeof import("node:path");
+};
+export declare function loadNodeRuntime(): Promise<NodeRuntimeModules | null>;
 export declare function isFilesystemAvailable(): Promise<boolean>;
 export declare function loadBarekeyJsonConfig(): Promise<{
     path: string;
+    directory: string;
     json: Record<string, unknown>;
 } | null>;
 export declare function loadCliSessionAuthResolver(fetchFn: typeof globalThis.fetch): Promise<{

package/dist/internal/node-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/node-runtime.ts"],"names":[],"mappings":"AA4VA,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE9D;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG,IAAI,CAAC,CAwCR;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GAAG,IAAI,CAAC,CAoER;AAOD,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CA0DlG;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkB3E;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxF"}
+{"version":3,"file":"node-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/node-runtime.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,cAAc,oBAAoB,CAAC,CAAC;IAClD,EAAE,EAAE,cAAc,kBAAkB,CAAC,CAAC;IACtC,SAAS,EAAE;QACT,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC;KAChD,CAAC;IACF,EAAE,EAAE,cAAc,SAAS,CAAC,CAAC;IAC7B,IAAI,EAAE,cAAc,WAAW,CAAC,CAAC;CAClC,CAAC;AAwCF,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAwB1E;AAyQD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE9D;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG,IAAI,CAAC,CAyCR;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GAAG,IAAI,CAAC,CAoER;AAOD,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CA0DlG;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkB3E;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxF"}

package/dist/internal/node-runtime.js

@@ -7,7 +7,7 @@ function isNodeRuntime() {
         process.versions !== null &&
         typeof process.versions.node === "string");
 }
-async function loadNodeRuntime() {
+export async function loadNodeRuntime() {
     if (!isNodeRuntime()) {
         return null;
     }
@@ -241,6 +241,7 @@ export async function loadBarekeyJsonConfig() {
             try {
                 return {
                     path: candidate,
+                    directory: current,
                     json: JSON.parse(raw),
                 };
             }

package/dist/internal/public-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/public-runtime.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAqB,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAM9E,KAAK,oBAAoB,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,GAAG;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AAqGF,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC,CAOtC"}
+{"version":3,"file":"public-runtime.d.ts","sourceRoot":"","sources":["../../src/internal/public-runtime.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAqB,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAO9E,KAAK,oBAAoB,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,GAAG;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AAyHF,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,2BAA2B,CAAC,CAOtC"}

package/dist/internal/public-runtime.js

@@ -1,10 +1,8 @@
 import { FsNotAvailableError, InvalidConfigurationProvidedError, NoConfigurationProvidedError, } from "../errors.js";
+import { normalizeMode, normalizeTypegenMode, readConfigString } from "./config.js";
 import { normalizeBaseUrl } from "./http.js";
 import { isFilesystemAvailable, loadBarekeyJsonConfig } from "./node-runtime.js";
 const DEFAULT_BAREKEY_API_URL = "https://api.barekey.dev";
-function readConfigString(value) {
-    return typeof value === "string" ? value.trim() : undefined;
-}
 function normalizeScope(input) {
     const organization = readConfigString(input.organization) ?? "";
     const project = readConfigString(input.project) ?? "";
@@ -20,7 +18,23 @@ function normalizeScope(input) {
         environment,
     };
 }
+function createStandaloneUnsupportedError(source) {
+    return new InvalidConfigurationProvidedError({
+        message: [
+            `${source} sets config.mode to "standalone".`,
+            "PublicBarekeyClient does not support standalone local env mode because it relies on a server filesystem to read .env files.",
+            "Use BarekeyClient on the server instead, or switch barekey.json config.mode back to \"centralized\" for browser/public usage.",
+        ].join(" "),
+    });
+}
 function normalizeJsonConfig(input, source) {
+    const config = "config" in input && typeof input.config === "object" && input.config !== null
+        ? input.config
+        : undefined;
+    normalizeTypegenMode(config?.typegen ?? ("typegen" in input ? input.typegen : undefined), source);
+    if (normalizeMode(config?.mode, source) === "standalone") {
+        throw createStandaloneUnsupportedError(source);
+    }
     return normalizeScope({
         organization: input.organization ?? input.org,
         project: input.project,

package/dist/internal/runtime.d.ts

@@ -1,15 +1,29 @@
 import type { BarekeyClientOptions, BarekeyStandardSchemaV1 } from "../types.js";
+import type { BarekeyMode, BarekeyTypegenMode } from "../types.js";
 import { type InternalAuthResolver } from "./http.js";
 type BarekeyResolvedScope = {
     organization: string;
     project: string;
     environment: string;
+    typegenMode: BarekeyTypegenMode;
+    mode: BarekeyMode;
+    localEnvRoot: string | null;
 };
-export type BarekeyRuntimeContext = BarekeyResolvedScope & {
+type BarekeyCentralizedRuntimeContext = BarekeyResolvedScope & {
+    mode: "centralized";
+    localEnvRoot: null;
     baseUrl: string;
     auth: InternalAuthResolver;
     requirements?: BarekeyStandardSchemaV1;
 };
+type BarekeyStandaloneRuntimeContext = BarekeyResolvedScope & {
+    mode: "standalone";
+    localEnvRoot: string;
+    baseUrl: null;
+    auth: null;
+    requirements?: BarekeyStandardSchemaV1;
+};
+export type BarekeyRuntimeContext = BarekeyCentralizedRuntimeContext | BarekeyStandaloneRuntimeContext;
 export declare function resolveRuntimeContext(options: BarekeyClientOptions, fetchFn: typeof globalThis.fetch): Promise<BarekeyRuntimeContext>;
 export {};
 //# sourceMappingURL=runtime.d.ts.map

package/dist/internal/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/internal/runtime.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,oBAAoB,EAAqB,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,KAAK,oBAAoB,EAAoB,MAAM,WAAW,CAAC;AASxE,KAAK,oBAAoB,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AA8JF,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAQhC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/internal/runtime.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,oBAAoB,EAEpB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,KAAK,oBAAoB,EAAoB,MAAM,WAAW,CAAC;AASxE,KAAK,oBAAoB,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,IAAI,EAAE,WAAW,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,KAAK,gCAAgC,GAAG,oBAAoB,GAAG;IAC7D,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,EAAE,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AAEF,KAAK,+BAA+B,GAAG,oBAAoB,GAAG;IAC5D,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,gCAAgC,GAChC,+BAA+B,CAAC;AAuMpC,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,OAAO,UAAU,CAAC,KAAK,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CA4BhC"}

package/dist/internal/runtime.js

@@ -1,4 +1,5 @@
 import { FsNotAvailableError, InvalidConfigurationProvidedError, InvalidCredentialsProvidedError, InvalidRefreshTokenError, NoConfigurationProvidedError, NoCredentialsProvidedError, UnauthorizedError, } from "../errors.js";
+import { normalizeMode, normalizeTypegenMode, readConfigString } from "./config.js";
 import { normalizeBaseUrl } from "./http.js";
 import { isFilesystemAvailable, loadBarekeyJsonConfig, loadCliSessionAuthResolver, } from "./node-runtime.js";
 const DEFAULT_BAREKEY_API_URL = "https://api.barekey.dev";
@@ -9,29 +10,49 @@ function readProcessEnv(key) {
     const value = process.env[key];
     return typeof value === "string" ? value : undefined;
 }
-function readConfigString(value) {
-    return typeof value === "string" ? value.trim() : undefined;
+function safeCurrentWorkingDirectory() {
+    if (typeof process === "undefined" || typeof process.cwd !== "function") {
+        return null;
+    }
+    return process.cwd();
 }
 function normalizeScope(input) {
+    const mode = input.mode ?? "centralized";
     const organization = readConfigString(input.organization) ?? "";
     const project = readConfigString(input.project) ?? "";
     const environment = readConfigString(input.environment) ?? "";
-    if (organization.length === 0 || project.length === 0 || environment.length === 0) {
+    if (mode !== "standalone" &&
+        (organization.length === 0 || project.length === 0 || environment.length === 0)) {
         throw new InvalidConfigurationProvidedError({
             message: `${input.source} must provide organization, project, and environment.`,
         });
     }
+    const localEnvRoot = mode === "standalone" ? input.localEnvRoot ?? safeCurrentWorkingDirectory() : null;
+    if (mode === "standalone" && (!localEnvRoot || localEnvRoot.trim().length === 0)) {
+        throw new FsNotAvailableError({
+            message: "Barekey standalone mode requires filesystem access and a working directory.",
+        });
+    }
     return {
         organization,
         project,
         environment,
+        typegenMode: mode === "standalone" ? "minimal" : (input.typegenMode ?? "semantic"),
+        mode,
+        localEnvRoot: mode === "standalone" ? localEnvRoot : null,
     };
 }
-function normalizeJsonConfig(input, source) {
+function normalizeJsonConfig(input, source, localEnvRoot) {
+    const config = "config" in input && typeof input.config === "object" && input.config !== null
+        ? input.config
+        : undefined;
     return normalizeScope({
         organization: input.organization ?? input.org,
         project: input.project,
         environment: input.environment ?? input.stage,
+        typegenMode: normalizeTypegenMode(config?.typegen ?? ("typegen" in input ? input.typegen : undefined), source),
+        mode: normalizeMode(config?.mode, source),
+        localEnvRoot,
         source,
     });
 }
@@ -54,13 +75,16 @@ async function resolveScope(options) {
         });
     }
     if (explicitJson !== undefined) {
-        return normalizeJsonConfig(explicitJson, "The provided json configuration");
+        return normalizeJsonConfig(explicitJson, "The provided json configuration", safeCurrentWorkingDirectory());
     }
     if (explicitCount === 3) {
         return normalizeScope({
             organization: explicitOrganization,
             project: explicitProject,
             environment: explicitEnvironment,
+            typegenMode: "semantic",
+            mode: "centralized",
+            localEnvRoot: null,
             source: "The provided Barekey configuration",
         });
     }
@@ -73,7 +97,7 @@ async function resolveScope(options) {
             message: "No Barekey configuration was found and no barekey.json file could be loaded.",
         });
     }
-    return normalizeJsonConfig(loadedConfig.json, `The barekey.json file at ${loadedConfig.path}`);
+    return normalizeJsonConfig(loadedConfig.json, `The barekey.json file at ${loadedConfig.path}`, loadedConfig.directory);
 }
 async function resolveAuth(fetchFn) {
     const envToken = readProcessEnv("BAREKEY_ACCESS_TOKEN");
@@ -125,9 +149,27 @@ async function resolveAuth(fetchFn) {
     };
 }
 export async function resolveRuntimeContext(options, fetchFn) {
-    const [scope, auth] = await Promise.all([resolveScope(options), resolveAuth(fetchFn)]);
+    const scope = await resolveScope(options);
+    if (scope.mode === "standalone") {
+        if (!(await isFilesystemAvailable())) {
+            throw new FsNotAvailableError({
+                message: "Barekey standalone mode requires a local filesystem to read .env files.",
+            });
+        }
+        return {
+            ...scope,
+            mode: "standalone",
+            localEnvRoot: scope.localEnvRoot ?? safeCurrentWorkingDirectory() ?? "",
+            baseUrl: null,
+            auth: null,
+            requirements: options.requirements,
+        };
+    }
+    const auth = await resolveAuth(fetchFn);
     return {
         ...scope,
+        mode: "centralized",
+        localEnvRoot: null,
         baseUrl: auth.baseUrl,
         auth: auth.auth,
         requirements: options.requirements,

package/dist/internal/singleton.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"singleton.d.ts","sourceRoot":"","sources":["../../src/internal/singleton.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AAyJrB,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAYrF;AAED,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAOR"}
+{"version":3,"file":"singleton.d.ts","sourceRoot":"","sources":["../../src/internal/singleton.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AA0LrB,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAYrF;AAED,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAOR"}

package/dist/internal/singleton.js

@@ -28,10 +28,21 @@ function normalizeJsonScope(value) {
     if (value === undefined) {
         return null;
     }
+    const config = typeof value.config === "object" && value.config !== null
+        ? value.config
+        : undefined;
+    const runtimeMode = config?.mode === "standalone" ? "standalone" : "centralized";
     return {
         organization: readConfigString(value.organization ?? value.org),
         project: readConfigString(value.project),
         environment: readConfigString(value.environment ?? value.stage),
+        typegenMode: runtimeMode === "standalone"
+            ? "minimal"
+            : config?.typegen === "minimal"
+                ? "minimal"
+                : "semantic",
+        runtimeMode,
+        localEnvRoot: runtimeMode === "standalone" ? safeCurrentWorkingDirectory() : null,
     };
 }
 function normalizeScopeKey(options) {
@@ -47,6 +58,9 @@ function normalizeScopeKey(options) {
             organization,
             project,
             environment,
+            typegenMode: "semantic",
+            runtimeMode: "centralized",
+            localEnvRoot: null,
         };
     }
     return {

package/dist/internal/standalone.d.ts

@@ -0,0 +1,10 @@
+import type { BarekeyVariableDefinition } from "../types.js";
+import type { TypegenManifest } from "./typegen.js";
+export declare function loadStandaloneDefinitions(rootDirectory: string): Promise<Array<BarekeyVariableDefinition>>;
+export declare function buildStandaloneTypegenManifest(input: {
+    rootDirectory: string;
+    organization: string;
+    project: string;
+    environment: string;
+}): Promise<TypegenManifest>;
+//# sourceMappingURL=standalone.d.ts.map